Extreme Networks Sentriant AG 5.3 Manuals

Manuals and User Guides for Extreme Networks Sentriant AG 5.3. We have 1 Extreme Networks Sentriant AG 5.3 manual available for free PDF download: Software User's Manual

Extreme Networks Sentriant AG 5.3 Software User's Manual (494 pages)

Brand: Extreme Networks | Category: Software | Size: 8.22 MB

Table of Contents
3
List of Figures

15
List of Tables

21
Chapter 1: Introduction

23
- Sentriant AG Home Window
  23
- System Monitor
  24
- Figure 1: Sentriant AG Home Window
  24
- Figure 2: System Monitor Window
  25
- Overview
  26
  - Figure 3: System Monitor Window Legend
    26
  - Table 1: Test Methods
    27
  - About Sentriant AG
    28
    
    NAC Policy Definition
    28
    
    Endpoint Testing
    29
    
    Compliance Enforcement
    29
    
    Automated and Manual Repair
    30
    
    Targeted Reporting
    30
  - The Sentriant AG Process
    28
- Technical Support
  30
- Table 2: Sentriant AG Technical Support
  30
- Additional Documentation
  31
- Installing and Upgrading
  31
- Conventions Used in this Document
  31
  - Navigation Paragraph
    31
  - Note Paragraph
    32
  - Caution Paragraph
    32
  - Warning Paragraph
    32
  - Bold Font
    32
  - Task Paragraph
    32
  - Italic Text
    33
  - Courier Font
    33
  - Angled Brackets
    33
  - Square Brackets
    34
  - Terms
    34
- Copying Files
  34
  - Scp
    35
  - Pscp
    35
- Users' Guide Online Help
  35
- Figure 4: Online Help
  36
- Figure 5: Index Tab
  37
- Figure 6: Search Tab
  38
Chapter 2: Clusters and Servers

39
Chapter 3: System Configuration

43
- Introduction
  43
- Table 3: Default Menu Options
  43
- Enforcement Clusters and Servers
  44
- Enforcement Clusters
  45
- Enforcement Servers
  49
- Management Server
  56
- User Accounts
  63
  - Adding a User Account
    63
  - Figure 21: System Configuration, User Accounts
    64
  - Figure 22: Add User Account
    65
  - Searching for a User Account
    66
  - Table 4: Default User Roles
    66
  - Sorting the User Account Area
    67
  - Copying a User Account
    67
  - Figure 23: Copy User Account
    67
  - Editing a User Account
    68
  - Figure 24: User Account
    68
  - Deleting a User Account
    69
- User Roles
  69
  - Adding a User Role
    69
  - Figure 25: System Configuration, User Roles
    70
  - Figure 26: Add User Role
    70
  - Editing User Roles
    71
  - Table 5: User Role Permissions
    71
  - Deleting User Roles
    72
  - Sorting the User Roles Area
    72
  - Figure 27: User Role
    72
- License
  73
  - Updating Your License Key
    73
  - Figure 28: System Configuration, License
    73
- Test Updates
  74
- Quarantining, General
  77
- Quarantining, 802.1X
  79
  - Entering Basic 802.1X Settings
    79
  - Authentication Settings
    80
    
    Selecting the RADIUS Authentication Method
    80
    
    Configuring Windows Domain Settings
    80
    
    Figure 33: System Configuration, Windows Domain
    81
    
    Configuring Openldap Settings
    82
    
    Figure 34: System Configuration, Openldap
    83
  - Adding 802.1X Devices
    85
  - Figure 35: Add 802.1X Device
    85
  - Testing the Connection to a Device
    86
  - Figure 36: Add 802.1X Device, Test Connection Area Option 1
    86
  - Figure 37: Add 802.1X Device, Test Connection Area Option 2
    86
  - Cisco IOS
    87
  - Figure 38: Add Cisco IOS Device
    88
  - Cisco Catos
    89
    
    Figure 39: Add Cisco Catos Device
    89
    
    Catos User Name in Enable Mode
    91
  - Enterasys
    91
  - Figure 40: Add Enterasys Device
    92
  - Extremeware
    93
  - Figure 41: Add Extremeware Device
    93
  - Extremexos
    94
  - Figure 42: Add Extremexos Device
    95
  - Foundry
    96
  - Figure 43: Add Foundry Device
    96
  - HP Procurve Switch
    97
  - Figure 44: Add HP Procurve Device
    98
  - HP Procurve WESM Xl or HP Procurve WESM Zl
    100
  - Figure 45: Add HP Procurve WESM Xl/Zl Device
    101
  - HP Procurve 420 AP or HP Procurve 530 AP
    102
  - Figure 46: Add HP Procurve 420/530 AP Device
    103
  - Nortel
    104
  - Figure 47: Add Nortel Device
    105
  - Other
    106
  - Figure 48: Add Other Device
    107
- Quarantining, DHCP
  108
- Quarantining, Inline
  112
- Figure 51: Quarantine Area
  112
- Post-Connect
  113
- Maintenance
  118
  - Initiating a New Backup
    119
  - Figure 56: System Configuration, Maintenance
    119
  - Restoring from a Backup
    120
- Downloading Support Packages
  120
- Figure 57: Backup Successful Message
  120
- Cluster Setting Defaults
  121
  - Testing Methods
    121
    
    Selecting Test Methods
    121
    
    Figure 58: System Configuration, Testing Methods
    121
    
    Ordering Test Methods
    122
    
    Recommended Test Methods
    122
  - Selecting End-User Options
    123
  - Quarantine/Guest Resources
    123
  - Figure 59: System Configuration, Quarantine/Guest Resources Area
    124
  - Table 6: Resource Tips
    125
  - Notifications
    126
    
    Enabling Notifications
    126
    
    Figure 60: System Configuration, Notifications
    127
  - End-User Screens
    128
    
    Specifying an End-User Screen Logo
    128
    
    Specifying the End-User Screen Text
    129
    
    Figure 61: System Configuration, End-User Screens
    129
    
    Specifying the End-User Test Failed Pop-Up Window
    130
  - Agentless Credentials
    131
    
    Adding Windows Credentials
    131
    
    Figure 62: System Configuration, Agentless Credentials
    131
    
    Figure 63: Agentless Credentials, Add Windows Administrator Credentials
    132
    
    Testing Windows Credentials
    133
    
    Editing Windows Credentials
    133
    
    Deleting Windows Credentials
    134
    
    Sorting the Windows Credentials Area
    134
- Logging
  134
- Advanced Settings
  136
  - Setting Timeout Periods
    136
  - Figure 65: System Configuration, Advanced Option
    137
Chapter 4: Endpoint Activity

139
Chapter 5: End-User Access

153
- Test Methods Used
  153
  - Agent Callback
    153
- Endpoints Supported
  154
- Browser Version
  155
- Firewall Settings
  156
  - Managed Endpoints
    156
  - Unmanaged Endpoints
    156
  - Making Changes to the Firewall
    156
- Windows Endpoint Settings
  156
- Mac os X Endpoint Settings
  170
- End-User Access Windows
  173
  - Figure 91: Mac Ports
    173
  - Figure 92: End-User Opening Window
    174
  - Opening Window
    174
  - Windows NAC Agent Test Windows
    175
    
    Automatically Installing the Windows Agent
    175
    
    Figure 93: End-User Installing Window
    175
    
    Figure 94: End-User Agent Installation Failed
    176
    
    Removing the Agent
    177
    
    Figure 95: End-User Agent Installation Window (Start)
    177
    
    Figure 96: End-User Agent Installation Window (Finish)
    177
    
    Manually Installing the Windows Agent
    178
    
    Figure 97: Add/Remove Programs
    178
    
    How to View the Windows Agent Version Installed
    179
    
    Figure 98: Security Certificate
    179
    
    Figure 99: Run or Save to Disk
    179
  - Mac os Agent Test Windows
    180
    
    Installing the MAC os Agent
    180
    
    Figure 100: Agent Version
    180
    
    Figure 101: Start Mac os Installer
    180
    
    Figure 102: Mac os Installer 1 of 5
    181
    
    Figure 103: Mac os Installer 2 of 5
    181
    
    Figure 104: Mac os Installer 3 of 5
    182
    
    Figure 105: Mac os Installer 4 of 5
    182
    
    Verifying the Mac os Agent
    183
    
    Figure 106: Mac os Installer 5 of 5
    183
    
    Figure 107: Applications, Utilities Folder
    184
    
    Figure 108: Activity Monitor
    185
    
    Removing the Mac os Agent
    186
    
    Figure 109: Mac Terminal
    186
  - Activex Test Windows
    187
  - Figure 110: End-User Activex Plug-In Failed
    187
  - Agentless Test Windows
    188
  - Figure 111: End-User Login Credentials
    188
  - Figure 112: End-User Login Failed
    189
  - Figure 113: End-User Testing
    190
  - Figure 114: End-User Testing Successful
    190
  - Test Successful Window
    190
  - Testing Window
    190
  - Figure 115: End-User Testing Cancelled
    191
  - Testing Cancelled Window
    191
  - Testing Failed Window
    191
  - Figure 116: End-User Testing Failed Example 1
    192
  - Error Windows
    193
- Customizing Error Messages
  193
- Figure 117: End-User Testing Failed, Printable Results
  193
- Figure 118: End-User Error
  193
- Table 7: Default Test Names and Descriptions
  195
Chapter 6: NAC Policies

201
Chapter 7: Quarantined Networks

217
- New End-Users
  217
- Shared Resources
  217
- Untestable Endpoints and DHCP Mode
  217
- Windows Domain Authentication and Quarantined Endpoints
  218
Chapter 8: High Availability and Load Balancing

221
- High Availability
  221
- Figure 129: Inline Installations
  222
- Figure 130: DHCP Installation
  223
- Figure 131: 802.1X Installation
  224
- Load Balancing
  225
Chapter 9: Inline Quarantine Method

227
- Figure 132: Inline Installations
  228
Chapter 10: DHCP Quarantine Method

229
- Configuring Sentriant AG for DHCP
  230
  - Figure 133: DHCP Installation
    230
  - Configuring Windows Update Service for XP SP2
    231
  - Router Configuration
    231
    
    Configuring the Router Acls
    231
  - Setting up a Quarantine Area
    231
Chapter 11: 802.1X Quarantine Method

233
Chapter 12: API

261
- Overview
  261
- Setting Sentriant AG Properties
  262
- Figure 148: Sentriant AG API Communication
  262
- Setting Firewall Rules
  263
- Sentriant AG Events Generated
  263
  - Examples of Events Generated
    264
  - Java Program and Command for Events
    266
- Sentriant AG Requests Supported
  266
  - Examples of Requests
    267
  - Post-Connect Request Example
    269
  - Java Program and Command for Requests
    270
Chapter 13: Remote Device Activity Capture

271
- Creating a DAC Host
  271
- Sentriant AG to Infoblox Connector
  284
  - Configuring the Infoblox Server
    284
  - Configuring Sentriant AG
    284
Chapter 14: Reports

287
- Table 9: Report Types and Fields
  287
- Generating Reports
  288
- Figure 162: Reports
  289
- Figure 163: NAC Policy Results Report
  290
- Viewing Report Details
  290
- Figure 164: Test Details Report
  291
- Converting an HTML Report to a Word Document
  292
- Printing Reports
  292
- Saving Reports to a File
  292
Chapter 15: DHCP Plug-In

295
Chapter 16: System Administration

307
- Launching Sentriant AG
  307
- Restarting Sentriant AG System Processes
  307
- Managing Your Sentriant AG License
  308
  - Entering a New License Key
    308
  - Table 11: Service Stop and Restart Commands
    308
- Downloading New Tests
  309
- System Settings
  310
  - Dns/Windows Domain Authentication and Quarantined Endpoints
    310
  - Matching Windows Domain Policies to NAC Policies
    311
  - Setting the Access Mode
    311
  - Naming Your Enforcement Cluster
    312
  - Changing the MS Host Name
    312
  - Changing the es Host Name
    312
  - Changing the MS or es IP Address
    312
  - Resetting Your System
    313
  - Resetting Your Test Data
    314
  - Changing Properties
    315
  - Specifying an Email Server for Sending Notifications
    316
- Entering Networks Using CIDR Format
  316
- Table 12: CIDR Naming Conventions
  316
- Database
  317
  - Creating a Backup File
    317
  - Changing the Backup Timeouts
    317
  - Restoring from Backup
    318
    
    Restoring to a New Server
    318
    
    Restoring to the same Server
    318
  - Restoring the Original Database
    319
  - Figure 175: Restore System
    319
  - Figure 176: Login
    319
  - Generating a Support Package
    320
- System Requirements
  320
- Table 13: Sentriant AG System Requirements
  320
- Supported Vpns
  321
- Adding Custom Tests
  322
  - Introduction
    322
  - References
    322
  - Changing the Error Messages in a Test Script
    322
  - Figure 177: Test Script Code
    323
  - Figure 178: Example Installcustomtests Output
    325
  - Creating a Custom Test Class Script from Scratch
    326
  - Figure 179: Testtemplate.py
    327
  - Figure 180: Checkopenports.py Script
    330
  - Basictests API
    334
  - Table 14: Basictests API
    335
- End-User Access Windows
  342
- How Sentriant AG Handles Static IP Addresses
  343
- Managing Passwords
  344
- NTLM 2 Authentication
  347
- Working with Ranges
  347
- Installing SSL Certificates
  349
- Moving an es from One MS to Another
  350
- Recovering Quickly from a Network Failure
  351
- VLAN Tagging
  352
- Iptables Wrapper Script
  353
- Updating Rules Without an Internet Connection
  354
  - Downloading the Files
    354
  - Updating Rules
    355
- Supporting Network Management System
  355
  - Enabling ICMP Echo Requests
    355
    
    Enable Temporary Ping
    356
    
    Enable Persistent Ping
    356
    
    Restricting the ICMP Request
    356
  - Changing the Community Name for SNMPD
    357
  - Figure 181: Snmpd.conf Example File
    358
  - SNMP Mibs
    359
Appendix A: Requirements

361
Chapter B: Patch Management

363
- Flagging a Test to Launch a Patch Manager
  363
- Figure 182: Initiate a Patch Manager Check Box
  363
- Selecting the Patch Manager
  364
- Specifying the Number of Retests
  364
- Specifying the Retest Frequency
  364
- SMS Patch Management
  365
- SMS Concepts
  365
- Sentriant Ag/Sms/Sentriant AG Process
  365
- Sentriant AG Setup
  366
- Learning more about SMS
  366
Appendix C: Access Control Precedence

367
- Table 16: Access Control Precedence
  367
Appendix D: Endpoint Testing Conditions

369
- Table 17: Conditions Affecting Endpoint Testing
  369
Appendix E: Troubleshooting Quarantined Endpoints

373
- Table 18: Troubleshooting Quarantined Endpoints
  373
Appendix F: Enforcement Server Processes and Threads

377
- Table 19: Enforcement Server Processes and Threads
  377
Appendix G: Configuring the Post-Connect Server

381
- Overview
  381
- Extracting the ZIP File
  381
  - Windows
    381
  - Linux
    382
- ZIP File Contents
  382
- Setting up a Post-Connect Host
  383
  - Windows
    383
  - Linux
    384
- Viewing Logs
  386
- Testing the Service
  386
  - Windows
    386
  - Linux
    386
- Configuring Your Sensor
  387
- Allowing Sentriant AG through the Firewall
  387
Appendix H: Tests Help

389
- Browser Security Policy-Windows
  389
- Operating System-Windows
  394
  - IIS Hotfixes
    394
  - Internet Explorer Hotfixes
    395
  - Microsoft Office Hotfixes
    395
  - Figure 183: Microsoft Office Hotfixes Critical Updates
    395
  - Microsoft Applications Hotfixes
    396
  - Microsoft Servers Hotfixes
    396
  - Microsoft Tools Hotfixes
    396
  - Service Packs
    397
  - Windows 2000 SP4 Hotfixes
    397
  - Windows 2003 SP1 Hotfixes
    397
  - Windows 2003 SP2 Hotfixes
    398
  - Windows Automatic Updates
    398
  - Windows Media Player Hotfixes
    399
  - Windows Vista™ SP0 Hotfixes
    399
  - Windows XP SP1 Hotfixes
    400
  - Windows XP SP2 Hotfixes
    400
- Security Settings-OS X
  401
  - Mac Airport WEP Enabled
    401
  - Mac Airport Preference
    401
  - Mac Airport User Prompt
    401
  - Mac Anti-Virus
    402
  - Mac Bluetooth
    402
  - Mac Firewall
    402
  - Mac Internet Sharing
    403
  - Mac Quicktime® Updates
    403
  - Mac Security Updates
    404
  - Mac Services
    404
- Security Settings-Windows
  404
  - Allowed Networks
    405
  - Microsoft Excel Macros
    405
  - Microsoft Outlook Macros
    406
  - Microsoft Word Macros
    406
  - Services Not Allowed
    407
  - Services Required
    408
  - Windows Bridge Network Connection
    409
  - Windows Wireless Network SSID Connections
    409
  - Windows Security Policy
    409
  - Windows Startup Registry Entries Allowed
    410
  - Wireless Network Connections
    411
- Software-Windows
  412
  - Anti-Spyware
    412
  - Anti-Virus
    412
  - High-Risk Software
    413
  - Microsoft Office Version Check
    413
  - P2P
    413
  - Personal Firewalls
    414
  - Software Not Allowed
    414
  - Software Required
    415
  - Worms, Viruses, and Trojans
    415
Appendix I: Database Design (Data Dictionary)

417
- Test_Result Table
  418
- Device Table
  419
- Sa_Cluster
  421
- Sa_Node
  421
- Sa_User
  422
- Cluster_To_User
  422
- User_Group
  422
- User_To_Groups
  423
- Group_To_Permission
  423
Appendix J: Ports Used in Sentriant AG

425
- Table 21: Ports in Sentriant AG
  425
Appendix K: MS Disaster Recovery

431
- Overview
  431
  - Installation Requirements
    431
  - Installing the Standby MS
    431
  - Ongoing Maintenance
    432
  - Failover Process
    432
Appendix L: Licenses

435
- Extreme Networks End-User License Agreement
  435
- Limitation of Liability
  436
- Other Licenses
  437
  - Apache License Version 2.0, January 2004
    438
  - Asm
    439
  - Open SSH
    440
  - Postgresql
    442
  - Postgresql Jdbc
    443
  - Xstream
    443
  - Libeay (Open SSL)
    443
  - Junit Common Public License - V 1.0
    444
  - Open SSL
    446
  - The GNU General Public License (GPL) Version 2, June 1991
    447
  - Pullparser
    450
  - Xpp3
    450
  - The GNU Lesser General Public License (LGPL) Version 2.1
    451
  - Ojdbc
    455
  - Javamail Sun Microsystems, Inc
    457
  - Jcharts
    459
  - Pyxml Python License (CNRI Python License)
    459
  - IO-Stty and IO-Tty
    460
  - Concurrent
    461
  - Crypto
    461
  - Winpcap
    462
  - Activation
    464
  - Java Optional Package
    465
  - Jsp-Api Package
    466
Appendix M: Glossary

471
Index

481

Extreme Networks Categories

Switch Wireless Access Point Software Network Hardware Network Accessory

More Extreme Networks Manuals

Extreme Networks Sentriant AG 5.3 Manuals

Extreme Networks Sentriant AG 5.3 Software User's Manual (494 pages)

Table of Contents

List of Figures

List of Tables

Chapter 1: Introduction

Chapter 2: Clusters and Servers

Chapter 3: System Configuration

Chapter 4: Endpoint Activity

Chapter 5: End-User Access

Chapter 6: NAC Policies

Chapter 7: Quarantined Networks

Chapter 8: High Availability and Load Balancing

Chapter 9: Inline Quarantine Method

Chapter 10: DHCP Quarantine Method

Chapter 11: 802.1X Quarantine Method

Chapter 12: API

Chapter 13: Remote Device Activity Capture

Chapter 14: Reports

Chapter 15: DHCP Plug-In

Chapter 16: System Administration

Appendix A: Requirements

Chapter B: Patch Management

Appendix C: Access Control Precedence

Appendix D: Endpoint Testing Conditions

Appendix E: Troubleshooting Quarantined Endpoints

Appendix F: Enforcement Server Processes and Threads

Appendix G: Configuring the Post-Connect Server

Appendix H: Tests Help

Appendix I: Database Design (Data Dictionary)

Appendix J: Ports Used in Sentriant AG

Appendix K: MS Disaster Recovery

Appendix L: Licenses

Appendix M: Glossary

Index

Related Products

Extreme Networks Categories